2 matches found
CVE-2020-10372: Improper Neutralization of Input During Web Page Generation
Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI...
5.4CVSS6AI score0.00612EPSS
SaveExploits1References2
PT-2020-12044
Name of the Vulnerable Software and Affected Versions Ramp AltitudeCDN Altimeter versions prior to 2.4.0 Description The issue allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the "dms/rest/services/datastore/createOrEditValueForKey" URI. Recommendations For versions...
5.4CVSS0.00612EPSS
SaveExploits1References4
20